* added proper escaping to user input.
* Added a heartbeat to keep the session going as well as refresh setups/fits when they have changed.
* Added overlay block for ajax operations, so people can't click buttons while scripts are still running.
* Adding two images for the flagship and animated turning thingy for the quickadd